City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.148.54.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62009
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.148.54.73. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 08:29:56 CST 2025
;; MSG SIZE rcvd: 105Host 73.54.148.12.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 73.54.148.12.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 95.52.39.73 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/95.52.39.73/ RU - 1H : (169) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN12389 IP : 95.52.39.73 CIDR : 95.52.0.0/18 PREFIX COUNT : 2741 UNIQUE IP COUNT : 8699648 ATTACKS DETECTED ASN12389 : 1H - 3 3H - 13 6H - 19 12H - 47 24H - 82 DateTime : 2019-11-02 21:17:31 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery |
2019-11-03 06:33:32 |
| 165.227.66.215 | attackbots | 2019-10-29T11:56:25.361776ts3.arvenenaske.de sshd[15545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.66.215 user=r.r 2019-10-29T11:56:27.324538ts3.arvenenaske.de sshd[15545]: Failed password for r.r from 165.227.66.215 port 35816 ssh2 2019-10-29T12:00:13.003981ts3.arvenenaske.de sshd[15643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.66.215 user=r.r 2019-10-29T12:00:15.127627ts3.arvenenaske.de sshd[15643]: Failed password for r.r from 165.227.66.215 port 49244 ssh2 2019-10-29T12:04:04.989934ts3.arvenenaske.de sshd[15653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.66.215 user=r.r 2019-10-29T12:04:06.962021ts3.arvenenaske.de sshd[15653]: Failed password for r.r from 165.227.66.215 port 34436 ssh2 2019-10-29T12:08:03.370431ts3.arvenenaske.de sshd[15658]: Invalid user marcos from 165.227.66.215 port 47872 2019-10-2........ ------------------------------ |
2019-11-03 06:41:33 |
| 138.197.148.223 | attackbots | 3389BruteforceFW21 |
2019-11-03 06:30:43 |
| 190.213.238.180 | attackspam | Connection by 190.213.238.180 on port: 23 got caught by honeypot at 11/2/2019 8:17:33 PM |
2019-11-03 06:33:15 |
| 89.108.105.34 | attackbots | st-nyc1-01 recorded 3 login violations from 89.108.105.34 and was blocked at 2019-11-02 22:05:13. 89.108.105.34 has been blocked on 15 previous occasions. 89.108.105.34's first attempt was recorded at 2019-11-02 18:14:24 |
2019-11-03 06:31:04 |
| 177.2.108.162 | attack | namecheap spam |
2019-11-03 06:18:01 |
| 165.227.16.222 | attackbotsspam | Nov 2 16:35:45 plusreed sshd[20314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.16.222 user=root Nov 2 16:35:48 plusreed sshd[20314]: Failed password for root from 165.227.16.222 port 44556 ssh2 ... |
2019-11-03 06:14:18 |
| 185.80.54.37 | attack | slow and persistent scanner |
2019-11-03 06:07:47 |
| 85.208.23.171 | attackspam | Nov 2 18:39:14 rb06 sshd[18567]: Failed password for r.r from 85.208.23.171 port 36972 ssh2 Nov 2 18:39:14 rb06 sshd[18567]: Received disconnect from 85.208.23.171: 11: Bye Bye [preauth] Nov 2 18:52:13 rb06 sshd[4378]: Failed password for invalid user aa from 85.208.23.171 port 34508 ssh2 Nov 2 18:52:13 rb06 sshd[4378]: Received disconnect from 85.208.23.171: 11: Bye Bye [preauth] Nov 2 18:55:41 rb06 sshd[4919]: Failed password for r.r from 85.208.23.171 port 45372 ssh2 Nov 2 18:55:41 rb06 sshd[4919]: Received disconnect from 85.208.23.171: 11: Bye Bye [preauth] Nov 2 18:58:56 rb06 sshd[17289]: Failed password for r.r from 85.208.23.171 port 56232 ssh2 Nov 2 18:58:56 rb06 sshd[17289]: Received disconnect from 85.208.23.171: 11: Bye Bye [preauth] Nov 2 19:02:17 rb06 sshd[20628]: Failed password for invalid user pos from 85.208.23.171 port 38860 ssh2 Nov 2 19:02:17 rb06 sshd[20628]: Received disconnect from 85.208.23.171: 11: Bye Bye [preauth] Nov 2 19:05:38 rb........ ------------------------------- |
2019-11-03 06:22:41 |
| 223.247.129.84 | attackspam | Oct 29 16:49:12 zulu1842 sshd[3298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84 user=r.r Oct 29 16:49:13 zulu1842 sshd[3298]: Failed password for r.r from 223.247.129.84 port 37056 ssh2 Oct 29 16:49:14 zulu1842 sshd[3298]: Received disconnect from 223.247.129.84: 11: Bye Bye [preauth] Oct 29 17:07:20 zulu1842 sshd[4183]: Invalid user wc from 223.247.129.84 Oct 29 17:07:20 zulu1842 sshd[4183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84 Oct 29 17:07:22 zulu1842 sshd[4183]: Failed password for invalid user wc from 223.247.129.84 port 46836 ssh2 Oct 29 17:07:22 zulu1842 sshd[4183]: Received disconnect from 223.247.129.84: 11: Bye Bye [preauth] Oct 29 17:12:45 zulu1842 sshd[4525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84 user=r.r Oct 29 17:12:47 zulu1842 sshd[4525]: Failed password for r.r fro........ ------------------------------- |
2019-11-03 06:18:41 |
| 52.116.42.243 | attackspambots | Nov 1 01:52:00 www6-3 sshd[27212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.116.42.243 user=r.r Nov 1 01:52:01 www6-3 sshd[27212]: Failed password for r.r from 52.116.42.243 port 34154 ssh2 Nov 1 01:52:02 www6-3 sshd[27212]: Received disconnect from 52.116.42.243 port 34154:11: Bye Bye [preauth] Nov 1 01:52:02 www6-3 sshd[27212]: Disconnected from 52.116.42.243 port 34154 [preauth] Nov 1 02:02:11 www6-3 sshd[27927]: Invalid user shell from 52.116.42.243 port 38682 Nov 1 02:02:11 www6-3 sshd[27927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.116.42.243 Nov 1 02:02:13 www6-3 sshd[27927]: Failed password for invalid user shell from 52.116.42.243 port 38682 ssh2 Nov 1 02:02:13 www6-3 sshd[27927]: Received disconnect from 52.116.42.243 port 38682:11: Bye Bye [preauth] Nov 1 02:02:13 www6-3 sshd[27927]: Disconnected from 52.116.42.243 port 38682 [preauth] Nov 1 02:06:1........ ------------------------------- |
2019-11-03 06:31:47 |
| 195.222.48.151 | attackspam | Automatic report - XMLRPC Attack |
2019-11-03 06:24:03 |
| 221.225.83.148 | attackspambots | 2019-11-02T23:28:17.382317scmdmz1 sshd\[29036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.225.83.148 user=root 2019-11-02T23:28:19.528570scmdmz1 sshd\[29036\]: Failed password for root from 221.225.83.148 port 34650 ssh2 2019-11-02T23:32:44.186521scmdmz1 sshd\[29394\]: Invalid user nuan from 221.225.83.148 port 44170 ... |
2019-11-03 06:36:23 |
| 13.251.170.198 | attack | RDP Bruteforce |
2019-11-03 06:15:02 |
| 183.111.125.172 | attackspam | Nov 2 22:21:29 jane sshd[27113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.125.172 Nov 2 22:21:31 jane sshd[27113]: Failed password for invalid user aart from 183.111.125.172 port 35054 ssh2 ... |
2019-11-03 06:25:06 |